Rapid7

Incident Command

Compare SIEM Packages

Detect faster, respond smarter, and secure everywhere with Rapid7 Incident Command.

Incident Command Packages

Our tiered subscriptions are designed to meet you and your team where you are in your security maturity journey, and give you options for how you can grow with Rapid7. All models are based on transparent, predictable asset-based pricing so you never have any surprise costs or headaches.

Add-on
Quickstart Included in Year 1
Add-on
90 Days + Add-On
13 Months + Add-On

Frequently asked questions

Assets are hosts running a workstation or server operating system to which data has been attributed in the last 30 days. This would include things like servers, desktops, laptops (physical and virtual), point of sales systems, etc.

The price does not change based on asset type.

Yes. Incident Command is priced by asset. The price per asset decreases across asset count tiers.

For a price quote, please visit: https://www.rapid7.com/pricing/request-a-quote/.

Yes. Incident Command is an annual SaaS subscription.

Yes, pricing will shift internationally. For a local price quote, please visit: https://www.rapid7.com/pricing/request-a-quote.

All Incident Command customers have access to our robust documentation and support resources. Customer Support is available regionally between 8AM and 6PM, worldwide. Rapid7 also provides eSupport, an easy-to-use, integrated web support tool that provides personalized, comprehensive self-help resources integrated with our Support Centers.

All assets do not have to be in one location. Many Incident Command customers have assets spread across multiple offices, remote employees, etc.

Yes. It’s easy to scale Incident Command thanks to our lightweight cloud deployment. Our Customer Support team can assist with any account updates required to support your needs.

Our Managed Detection and Response subscriptions are priced separately. For more information, explore Managed Threat Complete.

All subscriptions include a generous, Fair Use Monthly Data Policy that scales with asset tiers. Rapid7 will not throttle based on consumption, but rather works closely with customers to ensure they can operate effectively within their data limits, and create reasonable plans for additional data consumption in the rare case that this is necessary. Please connect with Rapid7 to learn more about data limits associated with these plans.

Analyst Recognition

2025 SIEM Magic Quadrant™ Is Here

Rapid7 has been included in the 2025 Gartner® Magic Quadrant™ for SIEM. Explore how our cloud-native platform helps SOC teams detect faster, automate confidently, and scale securely across hybrid environments.

gartner-plain.jpg